Washington Consumer Health Data Privacy Policy

Categories of consumer health data we collect, and how we use it

GentleTaper runs on your own device. Your taper record — the medication, the doses, the schedule, your symptoms and your notes — is written to your browser's storage and stays there. It is never sent to us, so it is not data we collect, hold, share or sell.

Two things do reach us:

• Your email address, if you create an account. Signing in works by a single-use link sent to your address; there is no password to create, and none is stored. An account currently holds your email address and nothing else — signing in does not move your taper history off your device. We use the address to send you that link and to keep the account. On its own an email address is not health information, but an account on a corticosteroid taper app can suggest something about the person holding it, so we treat it as consumer health data.
• What you write to us by email. If you email us and describe your taper, your symptoms or your medication, that message is consumer health data and we hold it, together with your address. We use it for one purpose: to answer you.

We do not use consumer health data for advertising, marketing, profiling or research, and we do not use it to train any model.

Categories of sources

Directly from you — the address you enter to sign in, and anything you choose to write to us. We do not obtain consumer health data from data brokers, advertising networks, public records, health care providers, insurers, connected devices, or any other outside source.

Categories of consumer health data we share

None. We do not share any category of consumer health data.

We have never sold consumer health data and we do not offer it for sale.

Third parties and affiliates

Categories of third parties with whom we share consumer health data: none.

Specific affiliates with whom we share consumer health data: none. GentleTaper has no affiliates.

Two service providers process it on our behalf, under contract and only to provide the service. Each acts on our instructions and may not use your data for its own purposes.

• Supabase Pte. Ltd., with Amazon Web Services beneath it — holds accounts and authentication records, in the Montreal region of Canada.
• Porkbun — carries our email.

Your rights, and how to exercise them

Under RCW 19.373.040 you have the right to:

• Confirm whether we collect, share or sell your consumer health data, and access that data — including a list of all third parties and affiliates with whom we have shared or sold it
• Withdraw your consent to our collection and sharing of your consumer health data
• Have your consumer health data deleted

How to make a request: email privacy@gentletaper.com and tell us which right you are exercising.

How long we take: we respond without undue delay and in all cases within 45 days of receiving your request. Where reasonably necessary we may extend that once by a further 45 days, and we will tell you why within the first 45.

Because the only consumer health data we hold is your account address and any correspondence, a deletion request means deleting your account and your messages to us. Your taper record is on your device and unaffected — you delete that yourself, in the app.

If we decline: we will tell you why, and you may appeal by replying to that message or by emailing privacy@gentletaper.com with “Appeal” in the subject line. We will inform you in writing of any action taken or not taken within 45 days of receiving the appeal. If we deny the appeal, you may submit a complaint to the Washington Attorney General at atg.wa.gov/file-complaint.

Contact

Soutien aux Études KotobaPro
privacy@gentletaper.com